Skip to content
TechCrunch·

🔒PHP Vulnerability Affects 70% of Websites

70% of websites are at risk from a decades-old PHP flaw

TL;DR

A decades-old PHP vulnerability has been discovered, affecting 70% of websites. Researchers found it using large language models, but it was humans who identified the flaw. Millions of attempted hacks have already been reported.

A severe vulnerability in PHP, a decades-old open-source language, has been discovered, affecting an estimated 70% of websites. This includes popular content management systems like WordPress and Drupal. The flaw was found by human researchers participating in OpenAI and Wiz's Hack the Planet initiative, not AI models. Millions of attempted hacks have already been reported, with Cloudflare and Amazon detecting exploitation attempts before the official announcement. If you're running a website, especially a small one, this is a big deal. The vulnerability requires immediate patching or website shutdown to prevent data breaches and privacy concerns. Larger companies have the resources to fight these threats, but smaller sites and government websites may struggle.

PHP Vulnerability Affects 70% of Websites — TechCrunch

Key Points

1

Vulnerability found by human researchers in OpenAI and Wiz's Hack the Planet initiative.

2

70% of websites use PHP, making them vulnerable to the discovered flaw.

3

Millions of attempted hacks have been reported, with Cloudflare and Amazon detecting exploitation attempts.

4

PHP is the core ingredient behind popular CMS like WordPress and Drupal, making them vulnerable.

5

Cloudflare CEO Matthew Prince posted about the vulnerability before the official announcement.

Why It Matters

If you're running a WordPress site or any other PHP-based platform, this is a critical issue. The vulnerability has been exploited by hackers, and millions of attempted hacks have already been reported. Immediate patching or website shutdown is required to prevent data breaches and privacy concerns. Larger companies have the resources to fight these threats, but smaller sites and government websites may struggle to keep up.

phpvulnerabilityhackingsecurityweb

Comments

Subscribe to join the conversation...

Be the first to comment

Enjoyed this article?

Get it daily. 7am. Free. Reads in 5 minutes.

Join 3,567 builders reading daily.

Also get